diff --git a/test/case/infix_firewall/basic/test.adoc b/test/case/infix_firewall/basic/test.adoc index bf6aef8b..015e9a4c 100644 --- a/test/case/infix_firewall/basic/test.adoc +++ b/test/case/infix_firewall/basic/test.adoc @@ -11,7 +11,7 @@ image::basic.svg[align=center, scaledwidth=50%] - Single zone configuration, "public", with action=drop - Allowed services: SSH (port 22), DHCPv6-client, mySSH (custom, port 222) - All other ports (HTTP, HTTPS, Telnet, etc.) blocked -- Verifies unused interfaces automatically assigned to default zone +- Check that unused interfaces are automatically assigned to default zone ==== Topology @@ -26,6 +26,7 @@ image::topology.svg[Basic Firewall for End Devices topology, align=center, scale . Verify ICMPv6 is dropped . Verify SSH service is allowed . Verify custom mySSH service is allowed +. Verify HTTP service override (8080 allowed, 80 blocked) . Verify other ports are blocked diff --git a/test/case/infix_firewall/basic/topology.dot b/test/case/infix_firewall/basic/topology.dot index c75e3bbf..52174355 100644 --- a/test/case/infix_firewall/basic/topology.dot +++ b/test/case/infix_firewall/basic/topology.dot @@ -1,26 +1,26 @@ graph "1x3" { layout = "neato"; overlap = false; - esep = "+80"; + esep = "+30"; node [shape=record, fontname="DejaVu Sans Mono, Book"]; edge [color="cornflowerblue", penwidth="2", fontname="DejaVu Serif, Book"]; host [ label="host | { mgmt | data }", - pos="1,1!", + pos="10,10.95!", requires="controller" ]; target [ label="{ mgmt | data | unused } | target", - pos="3,1!", + pos="30,10!", requires="infix", ]; dummy [ label="{ link } | dummy", - pos="5,1!", + pos="29.8,00!", requires="infix", ]; diff --git a/test/case/infix_firewall/basic/topology.svg b/test/case/infix_firewall/basic/topology.svg index 644d700d..22a6325f 100644 --- a/test/case/infix_firewall/basic/topology.svg +++ b/test/case/infix_firewall/basic/topology.svg @@ -1,45 +1,59 @@ - + - - + + 1x3 - + host - -host - -mgmt - -data + +host + +mgmt + +data target - -mgmt - -data - -unused - -target + +mgmt + +data + +unused + +target host:mgmt--target:mgmt - + host:data--target:data - -192.168.1.42/24 + +192.168.1.42/24 + + + +dummy + +link + +dummy + + + +target:unused--dummy:link +